cjoan75 Goto Github PK

radare2

UNIX-like reverse engineering framework and command-line toolset

red-team-infrastructure-automation

Disposable and resilient red team infrastructure with Terraform

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redteam

working on redteam activities.

redteam-1

redteam-soc

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

redteambins

Compiled binaries and ready code for Red Teaming

redteaming-public

Repo full of my red team shenanigans

redteampowershellscripts

Various PowerShell scripts that may be useful during red team exercise

red_team_tool_countermeasures

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

responder-windows

Responder Windows Version Beta

reversetcp-shell-framework-is-a-lightweight-c2-powershell-script

I tested the CMD payload (XOR obfuscated) against a fully patched Win10 E endpoint (no EDR but that’s next) and no alarms tripped. This little framework has some awesome possibilities for getting chained into an attack sequence. Although this tool is listed as only a couple days old, I do remember testing it back in the spring and it wasn’t nearly as effective off the shelf.

revoke-obfuscation

PowerShell Obfuscation Detection Framework

robber

Robber is open source tool for finding executables prone to DLL hijacking

rpi-fruitbox

Raspberry Pi fruitbox

rubeus

Trying to tame the three-headed dog.

samba

Samba docker container

script-win-privescalate-headstart

The lazy mans local Windows privilege escalation script.

scripts

Various scripts for penetration testing

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secure-host-baseline

NSA Information Assurance configuration guidance and files in support of the DoD Secure Host Baseline. iadgov

security-tools

Security Tools

securityonion

Security Onion 2 - Linux distro for threat hunting, enterprise security monitoring, and log management

seth

Perform a MitM attack and extract clear text credentials from RDP connections

sharphound3

C# Data Collector for the BloodHound Project, Version 3

sift

SIFT

sigma

Generic Signature Format for SIEM Systems